Microsoft Operations Manager With Management Packs For Hardware: Managing The Windows Server Platform

Baelson DuqueProgram ManagerOperations ManagerWindows Enterprise Management DivisionMicrosoft Corporation

OutlineOutline

Microsoft Operations Manager (MOM) 2005 Introduction

Partner Management PacksServer Hardware Monitoring

Network Monitoring

MOM 2005 Architecture

Management Pack Goals

What’s in a Management Pack?

Reporting• Web-based management reports

• Scheduled Publishing

Event and performance management• Enterprise event collection

• Rules-based filtering and consolidation

• Proactive alerting/action response

Applications/Role Monitoring• Health Model

• Rules libraries

• Built-in knowledge-base

Enterprise ready• Central console

• Full redundancy

• Extensible

• MCF

MOM 2005 DeliversMOM 2005 Delivers

Automation• Scripts

• Tasks

• Diagnostics

Proof Point: Microsoft IT ExchangeProof Point: Microsoft IT Exchange

IT Example: Microsoft’s internal Exchange Environment123 Servers in 7 locations worldwide

36 active mailbox servers, 4.5M messages/day internally

MOM monitors it all, only alerting as necessary

Accuracy of MOM alerting reduces support churn

Daily Averages (for Exchange)

Events monitored 25,000/day

Performance metrics collected 5 million/day

Average # MOM alerts < 5 alert/server/day

Alert to Trouble Ticket RatioBEFORE MOM AFTER MOM

35 : 1 3 : 1

Partner Management PacksPartner Management Packs

Hardware ManagementHardware Management

Hardware monitoring is the foundation of the enterprise application stack

Dell server hardwareMOM 2000 management pack available

MOM 2005 update in progress

HP server hardwareMOM 2005 management pack released

Xian 2005 Network Manager For MOM 2005Xian 2005 Network Manager For MOM 2005

Xian for Networks designed and developed to extend MOM from day one

Manage the health of network devices and UPS hardware through MOM

Integrated view

Root cause analysis

Smart Management PacksSmart Management Packs

Cisco Routers Smart Management Packs (SMP)

Cisco Switches SMP

Cisco PIX Firewalls SMP

Cisco virtual private network (VPN) Concentrators SMP

F5 Networks BigIP SMP

Hewlett Packard Switches SMP

APC UPS SMP

NetScaler SMP

Monitoring The Network LayerMonitoring The Network Layer

250+ Network Reports

MOM Topology

Network State Views

Network Alerts

Network Events

MOM 2005 Management Pack For MOM 2005 Management Pack For Dell ServersDell Servers

Discovers and Groups Dell servers

Manages events from Dell server and disk agents

Adds a launch URL to Dell Server Administrator and Dell Remote Access Controllers

Provides a State View

Flexible topology views

Supports alert actions

Provides knowledge base information

Supports all MOM versions – 2005 and 2005 WorkGroup Edition

State ViewState ViewMonitor critical attributesMonitor critical attributes

State view of Dell server attributes: Chassis, fan, hardware log, memory, State view of Dell server attributes: Chassis, fan, hardware log, memory, power supply, processor, temperature, and voltagepower supply, processor, temperature, and voltage

Topology View By Computer GroupTopology View By Computer Group

Topology View For User-Defined GroupsTopology View For User-Defined Groups

MOM And HP SIMMOM And HP SIM

MOM 2005 and HP Systems Insight Manager combine to deliver complementary management of Microsoft Windows and HP hardware resources

Systems Insight Manager• Cross-platform lifecycle mgmt for servers,

clients, printers, and other devices

• In-depth hardware resource management

• Workgroup management

• Highly extensible with HP Essentials Software and user-defined plug-ins

MOM 2005• Discovery, availability, and performance

monitoring of Windows operating systems, applications and services

• Reporting and trend analysis

• Extensible with management packs and enterprise connectors

+

HP Management Packs For + MOM 2005HP Management Packs For + MOM 2005OverviewOverview

Complement and extend MOM with detailed hardware resource management

HP ProLiant Management Pack for MOM 2005 (Nov. 2004)

HP Integrity Management Pack for MOM 2005 (Nov. 2004)

Built on HP Insight Management Agent functionality

Integrate with key elements of MOM 2005Discover HP servers by system type (e.g., ProLiant DL, ML, BL)

State monitoring for HP hardware, agents, and services

HP systems clearly identified in MOM Diagram View

Predefined rules for processing HP hardware events as MOM alerts

Tasks to launch HP management tools from MOM

Available to download for no charge from HP.comwww.hp.com/servers/integration/microsoft

MOM 2005• Windows resource

management

Highly – Instrumented Hardware

Insight Management AgentsInsight Lights-Out Management Processor

HP Systems Insight Manager• In-depth hardware lifecycle

management

HP System Management Homepage

• Single system health and configuration

HP Hardware Resource Management

HP Management Packs

• HP Server Discovery/Grouping

• Hardware State Monitoring

• Server Attribute Data

• Automated Event ProcessingLaunch HP management tools

MOM Integration ArchitectureMOM Integration ArchitectureExtending MOM with Hardware Resource ManagementExtending MOM with Hardware Resource Management

HP Management Pack FeaturesHP Management Pack Features

MOM Architectural OverviewMOM Architectural OverviewKey termsKey terms

Data sources Events: Windows, application, Windows Management Instrumentation (WMI), service change, Simple Network Management Protocol (SNMP) traps, timed events, missing events, UNIX syslogs…

Performance data: Used for graphs, reports, and to set thresholds

AlertsMOMs indication of a particular issue What operators see first

Based on events, performance thresholds or script output

ResponseReaction to an alert (auto-resolve, send e-mail, page, run script)

Management Pack (MP)Set of Processing Rules to monitor applications

Supporting views and reports

DB

MOMMOM ServerServer

MOM 2005 ArchitectureMOM 2005 Architecture

MOM 2005 DatabaseData aggregationKnowledge – management packsConfiguration data

MOM 2005 ServerDatabase accessConsolidatorAgent managerUser interfacesAgentless monitoring

MOM 2005 AgentsLocal monitoringLocal managementEncrypted Communications

Reporting ServerSQL Reporting Services

Reporting Reporting ServerServer

ReportingReporting

AgentsAgentsAgentsAgents

Ops ConsoleOps ConsoleAdmin ConsoleAdmin ConsoleWeb ConsoleWeb Console

ConsolesConsoles

View Alerts/Server StateView Alerts/Server State condition requiring intervention condition requiring intervention execute tasks execute tasks topological views topological views service level exceptions service level exceptions

HTTPHTTP

Examples• Server Availability • Operational Health • Performance Trending

System Center Reporting

Server

MOM 2005 Server

Agents Agents

Internet Internet InformationInformation

ServerServer

AdministratorAdministratorConsoleConsole

SQL Reporting ServicesSQL Reporting Services

OperatorOperatorConsoleConsole

WebWebConsoleConsole

MOM – Operator PerspectiveMOM – Operator Perspective

Application StackApplication Stack

Microsoft provides Management Packs for Windows and Microsoft applications

Management Packs for the rest of the enterprise stack: Management Pack Ecosystem

All Management Packs produced by application owners/experts

Microsoft ApplicationsMicrosoft Applications

WindowsWindows

Extensions: Extensions: Backup, Anti Virus, etc.Backup, Anti Virus, etc.

NetworkNetwork

Server Hardware/StorageServer Hardware/Storage

Microsoft Microsoft ApplicationsApplications

33rdrd Party Applications Party Applications

33rdrd Party Party ApplicationsApplications

Management Pack GoalsManagement Pack Goals

Management Pack GoalsManagement Pack Goals

Developed by Application OwnersMicrosoft/Third-Parties/Your LOBs

Unparalleled product expertise

Out-of-box solutionReduce time to investigate and resolve

Lower Total Cost of Ownership (TCO)

Fast Return On Investment (ROI)

Higher Quality of Service

New management paradigm – Model-Based ManagementProvide a consistent monitoring solution across system services

Streamline datacenter operations

Facilitate preemptive monitoring

What Makes MOM Management What Makes MOM Management Packs Special?Packs Special?

Product team expertiseMPs developed by product teams

Deep knowledge of component architecture and potential failures

Management Packs will evolve with new releasesNew features (State, Diagrams, Reports)

Push required monitoring enhancements into core products

Management Pack GoalsManagement Pack Goals

Out-of-box solutionProvide a consistent monitoring solution across system services

Expose the true health states that exist for each service

Reduce time to diagnosis and TCO

Provide prioritized and actionable alerts

Knowledge“What to do when a problem occurs”

Knowledge tied to alerts

Zero Touch Deployment of Rules

What’s In A Management Pack?What’s In A Management Pack?

Alert PhilosophyAlert Philosophy

MOM’s powerful event analysis engine makes it easy to write a bad MPs

“Alert Spam”Common situation in original Management Packs

Led to a perception that MOM Management Packs need tuning prior to use

Guiding principle is nowAny alert must be a condition that requires some action on the part of an administrator

How Are Management Packs Designed?How Are Management Packs Designed?

Customer Requirements PhilosophyCover top scenarios and pain points

Solve top Product Support call generators

Feedback from Internal (MSIT and MSN) and external customers

Process – Model-Based ManagementHealth and Diagnostic Model

Management Pack coding

Burn-In and Tuning

Health And Diagnostic ModelingHealth And Diagnostic Modeling

What is a Health Model?Health States

State Transitions: Defined by indicators (e.g., events)

Organizes health indicators into an end-user digestible context

Alert = actionable health state transition

EG2

EG1

Stopped

EG3EG4

Running

Failed

Health Model To MPHealth Model To MP

W3SVC State Transitions

STARTED STOPPED

STARTING STOPPING

PAUSING

PAUSEDCONT’ing

SVC1

SVC2

SVC3

SVC4

SVC5

SVC6

SVC7

SVC8

SVC9SVC10

SVC11

SVC15

SVC13SVC12

SVC14

Health Modeling BenefitsHealth Modeling Benefits

Completeness: Unlikely to miss failure modes

Product improvement: Identify where better instrumentation is needed

Focused on Health State: Not events themselves; Provides meaningful context to management instrumentation

Alerts are always “actionable”: Alerts that send notification (e.g., e-mail/page) not only require attention, but needs human intervention

Differentiates MOM: Allows application owners to express the application health in operations centric point of view and persist application owner knowledge

What’s New For Management Packs What’s New For Management Packs With MOM 2005?With MOM 2005?

State MonitoringLive “at a glance” health view by role

Topology DiagramsDisplay relationships between servers

Reports SQL Server Reporting Services

System Center Reporting Server

TasksAd hoc diagnosis and resolution

Management Pack FeaturesManagement Pack Features

Alerts: Calls attention to critical events that require administrator intervention

Product Knowledge: Provides guidance for administrators to resolve outstanding alerts

Views: Provide targeted drill down details about server healthPerformance plots, collections of specific events/alerts, groups of servers, topology, etc.

State Monitoring: At a glance view of the state of my servers and applications by server role

Detail to component level

Tasks: Enable administrators to investigate and repair issues from the MOM console

Context sensitive diagnostics and remediation

Reports: Historical data analyticsAssess operations performance and capacity planning

RulesRules

Rules are the cornerstone of MOM MPsAll automated monitoring is based on different types of rules

Rules combined in “Rule Groups” Provide organizational/hierarchical structure

Most rules create AlertsIndicate to the application administrator action needs to be taken

Product knowledge associated with rulesTell administrators what they need to do when they encounter a given problem

MOM ConsoleMOM ConsoleKnowledge baseKnowledge base

Knowledge is a key feature

Facilitates rapid issue resolution

Empowers front line operators

Less escalation

Faster resolution

Management Pack EcosystemManagement Pack Ecosystem

Windows.NET Framework

Active Directory

Advanced Deployment Services

Component Services (formerly MTS 2.0)

Distributed Transaction Coordinator (Microsoft DTC)

Domain Name Service (DNS) service

File Replication Service

Group Policy

IIS versions 4.0/5.0/6.0

Message Queuing (MSMQ)

Operating Systems (Server/Desktop)

Rights Management Service

Routing and Remote Access Service

Terminal Services

Windows Internet Name Service (WINS)

Windows Server Clusters

Windows SharePoint Services

Microsoft Applications

Application Center 2000

Baseline Security Analyzer

BizTalk Server 2002/2004

Commerce Server 2000

Exchange Best Practice Analyzer

Exchange Intelligent Message Filter

Exchange Server 2003/2000/5.5

Identity Integration Server 2003

Internet Security and Acceleration Server 2000/2004

Live Communications Server 2003/2005

Operations Manager 2000/2005

Project Server 2003

Site Server 3.0

SNA Server 4.0

SQL Server 2000/7.0

Virtual Server 2005

Web Sites and Web Services

http://www.microsoft.com/mom/managementpackshttp://www.microsoft.com/mom/managementpacks

Third-Party Management PacksThird-Party Management Packs

ApplicationsBindView

BlackBerry Enterprise Server

Citrix MetaFrame XP

Horizon for SAP

Intercept Studio

Quest SpotlightActive Directory

Exchange

SQL Server

Windows

ServerView Integration 2.0

VERITAS Backup Exec

Non-Windows OSeXc Software

AS400

MVS

Debian Linux

FreeBSD

HP Tru64

HP-UX

IBM AIX

Mac OS X

Mandrake Linux

NetBSD

OpenBSD

RedHat Linux

SCO Unix

Sun Solaris

SuSe Linux

WindowsCE

AppMind OpenVMS

HardwareDell OpenManage

HP Integrity Servers

HP ProLiant Servers

eXc SoftwareAPC

Brocade

BayNetworks (Nortel)

Cisco

EMC

EqualLogic SAN

F5

Foundry

IBM FastT storage

JalaSOFTAPC UPS

Cisco PIX Firewalls

Cisco Routers

Cisco Switches

Cisco VPN Concentrators

F5 Network BigIP F5

Availability And ResourcesAvailability And Resources

Download HP Management Packs for ProLiant and Integrity servers at no charge from HP.com since 19 November 2004

Online FAQ and Troubleshootingwww.hp.com/servers/integration/microsoft

User DocumentationInstallation, configuration and usage information

Troubleshooting and FAQ

Available in HP management packs or via HP.com

HP Systems Insight Manager and ProLiant Essentialswww.hp.com/go/hpsim

www.hp.com/servers/proliantessentials

Takeaways/Action ItemsTakeaways/Action Items

Expose instrumentation that can surfaced to OS (for MOM 2005)

Expose events/instrumentation to BMC (e.g., via SMBus)

Model the health states of your Hardware

Create Management Pack

http://www.microsoft.com/momMP Authoring Guide

ResKit Tools

Community ResourcesCommunity Resources

Windows Hardware and Driver Central (WHDC)www.microsoft.com/whdc/default.mspx

Technical Communitieswww.microsoft.com/communities/products/default.mspx

Non-Microsoft Community Siteswww.microsoft.com/communities/related/default.mspx

Microsoft Public Newsgroupswww.microsoft.com/communities/newsgroups

Technical Chats and Webcastswww.microsoft.com/communities/chats/default.mspx

www.microsoft.com/webcasts

Microsoft Blogswww.microsoft.com/communities/blogs